Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: 712pdowaSRjpeIXBJO2QEBuD5ri2GjS2ARMw8imX4Ic=
Subject key identifier: C2:59:43:D5:C2:93:F5:D7:97:79:42:21:85:F3:10:45:3A:9B:FB:7A
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019DA4C15BD13A8BDAB4E6CC781E8BDC67CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 03A8
Signing time: Sun 19 Apr 2026 08:00:28 +0000
Manifest this update: Sun 19 Apr 2026 08:00:28 +0000
Manifest next update: Mon 20 Apr 2026 08:00:28 +0000
Files and hashes: 1: 2ZPAoDVMpQcEFj6ZwF6t3pvmnvE.roa (hash: 1rHNnFMhQDvJllSq2QAXfLYw1Y4xr+/L6lecMSt4yzM=)
2: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: kZ8p2LsZ4rnqdbbbfrUAyxjFCjBopcWSzowSR9fUZjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:5b:d1:3a:8b:da:b4:e6:cc:78:1e:8b:dc:67:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Apr 19 08:00:28 2026 GMT
Not After : Apr 20 08:00:28 2026 GMT
Subject: CN=c25943d5c293f5d79779422185f310453a9bfb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:1a:60:38:74:0c:dd:cc:dd:76:68:35:e1:
93:ff:0d:de:7e:30:dd:f9:c6:74:e5:39:f3:44:34:
ba:db:b7:f9:29:94:ec:65:f9:17:61:c4:ef:d7:53:
bf:3d:2e:db:26:dc:8a:6a:df:1b:91:4e:45:ff:96:
2b:0b:eb:99:07:51:99:c1:3b:12:d4:61:64:2e:c7:
8e:5b:c0:49:6e:80:35:2b:1c:3b:0e:35:aa:fe:22:
7b:d4:aa:29:f1:b9:c3:78:38:b7:37:aa:b3:90:c1:
d3:bf:7c:97:bf:62:ec:22:b4:a2:4a:89:ee:7c:f1:
e0:22:34:ef:08:db:66:b9:3a:89:f2:95:27:10:e8:
a8:a4:78:cf:e3:cf:43:76:88:28:37:5f:89:46:66:
01:29:74:9f:59:63:8b:3e:71:2e:6f:a6:1b:7b:c8:
f0:c0:c1:0c:2f:41:8f:e5:b6:1e:e5:f6:42:6c:d6:
f5:f7:b3:78:f3:f9:dc:1f:ab:e6:bd:89:4f:77:36:
9f:5a:ab:23:90:8c:8a:25:1b:a2:9d:9e:c6:7e:74:
0e:50:1a:c1:8d:54:89:0b:42:de:7b:4e:0a:be:03:
fd:c8:a2:ee:d4:bb:32:9d:b0:ae:ca:a1:a9:84:c3:
47:4c:94:bd:81:b0:0c:0b:dd:9b:a8:37:4a:91:72:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:59:43:D5:C2:93:F5:D7:97:79:42:21:85:F3:10:45:3A:9B:FB:7A
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:54:24:31:80:6b:ea:cc:4d:87:a2:d2:8f:02:64:40:76:
d7:e5:3f:83:ca:68:88:bb:7f:25:98:d4:9b:e0:74:2b:f6:96:
3b:5a:c0:cb:8a:4b:6d:3c:cd:bf:c2:20:41:bd:8c:57:24:39:
01:6a:2f:30:14:27:3a:67:ae:fa:00:e8:b0:e9:61:8a:8f:43:
2c:43:00:47:2e:d7:c4:ac:c8:f3:41:18:7a:ba:a0:3f:61:39:
6e:2b:70:9a:80:ef:14:6f:9b:00:16:a1:bf:02:86:15:f3:e8:
ce:b9:4d:f5:41:4b:9c:be:71:c9:3b:dc:73:39:b1:c1:98:26:
26:1c:b9:8d:c6:3c:2a:1c:46:4c:9b:f0:dd:2f:74:87:8a:55:
25:1b:37:8e:fc:73:84:a4:bd:d3:a5:0a:14:de:34:d8:94:93:
d8:47:c1:fa:dd:b5:2a:ae:ff:69:fb:b7:90:39:6d:2c:60:f1:
ed:26:7b:f2:05:ca:34:f2:f7:79:a6:db:88:8b:cf:5a:0e:5a:
ef:8a:e1:81:f1:a3:65:e5:d1:80:35:87:50:07:26:25:ce:ac:
09:8f:d5:ff:8a:65:4f:fd:d5:68:a3:67:15:e2:9d:07:8f:2b:
54:52:f3:c1:c0:42:7f:fc:ef:c5:b3:20:82:0a:3b:f6:bb:ff:
27:fc:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:39:09 2026 by rpki-client